Right to Work Extension Privacy

The extension helps an employer carry out an online right to work check on gov.uk and file the result to the worker’s record in Empliora. The checker starts a check from Empliora, the extension fills the share code and date of birth on the gov.uk page, the checker reads and confirms the result, and the extension files the outcome and the official gov.uk PDF back to that worker’s profile.

The extension runs only on these sites:

• gov.uk right to work pages (gov.uk, service.gov.uk, homeoffice.gov.uk) – to fill the check fields, read the result the checker is shown, and download the official result PDF.
• empliora.co.uk – to receive the check to carry out and to file the result back.

It does not run on, read or affect any other website.

While a check is in progress the extension keeps, in your browser’s local storage only, the details needed to complete it: the worker’s name, the share code, the date of birth, and a short-lived signed Empliora token that authorises filing the result. This is removed as soon as the check is filed. Nothing is stored on the extension’s own servers, because it has none.

When the checker confirms the result, the extension sends the outcome, the Home Office reference, the check date and the official gov.uk PDF to empliora.co.uk over an encrypted (HTTPS) connection, authenticated by the signed token. The result is saved to that worker’s record in the employer’s own Empliora account. The extension sends data to no other destination.

• It never sees, stores or transmits your gov.uk or Government Gateway sign-in details. You sign in to gov.uk yourself, as normal.
• It contains no analytics, tracking, advertising or fingerprinting.
• It does not read your browsing history, your other tabs, or any site outside gov.uk and empliora.co.uk.
• It does not sell or share personal data with anyone. The only recipient of check data is the employer’s own Empliora account.

• Storage – to hold the in-progress check locally until it is filed.
• Tabs / active tab – to open the gov.uk check in a tab and close it cleanly once the result is filed.
• Alarms – to check occasionally whether a newer version of the extension is available.
• Site access to gov.uk and empliora.co.uk – so it can do its job on those pages only.

The in-progress data in your browser is cleared once the check is filed or when you remove the extension. The filed result is held in Empliora and governed by the main Privacy Policy, where the employer is the data controller and Forge9X Ltd is the processor. Data-subject requests are handled as described there.

Questions about the extension or this notice: hello@empliora.co.uk.